This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
File:                     caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json)
Hash identifier:          CrpcLoXGYovFW0rSX2VeSxFwGerwsD2bjxGlFgV9c2o=
Subject key identifier:   BB:80:5B:CD:9C:05:EA:8F:BD:F4:71:3F:9E:C0:E4:E3:47:8F:77:15
Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C
Certificate issuer:       /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
Certificate serial:       019C2C9A53F1EEF6D3A83A39C2C8CAC18CB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
Manifest number:          055E
Signing time:             Thu 05 Feb 2026 07:00:37 +0000
Manifest this update:     Thu 05 Feb 2026 07:00:37 +0000
Manifest next update:     Fri 06 Feb 2026 07:00:37 +0000
Files and hashes:         1: Yybkl0ZQXrY26MdD4FQ9nCbOh9c.roa (hash: xOQT8aF5alDLKyDZy7KGBBHerw/+VNesMI/Q2sx+T/E=)
                          2: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: fQBaEzqSCglgEG4nLQD3xp0psOhwtV2ma0a6rKPtbEY=)
                          3: f6Gl5ia878MGtM32MXnrZU8aNMI.roa (hash: DY0u0e2tgwdLOC3jP4WK/B8b0MSVRVEFdP0Swwb6Kq0=)
                          4: s9H6P_An9Cs8KJ23K6jcUiaST5I.roa (hash: R6YBzLVPih79ie1zLN00BwSvjURpM3Xic3Nu8UvJvIk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Feb 2026 03:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:2c:9a:53:f1:ee:f6:d3:a8:3a:39:c2:c8:ca:c1:8c:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c
        Validity
            Not Before: Feb  5 07:00:37 2026 GMT
            Not After : Feb  6 07:00:37 2026 GMT
        Subject: CN=bb805bcd9c05ea8fbdf4713f9ec0e4e3478f7715
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:45:31:80:78:1f:92:72:7f:4f:31:34:8f:dc:
                    d9:dc:5d:ac:26:76:c8:9d:18:88:69:ac:45:ee:16:
                    d0:1a:6d:51:16:a1:aa:03:3f:34:0e:8e:49:75:5c:
                    bb:74:57:84:65:06:89:8d:8d:76:90:55:8b:8d:97:
                    99:17:41:53:57:92:33:d8:9d:78:b4:2f:ea:6c:81:
                    31:c9:4c:1a:53:0c:3d:f6:29:f1:53:2a:6d:cd:90:
                    8a:73:02:03:9d:77:f9:19:03:8a:7a:84:74:9b:96:
                    cb:7b:28:af:4e:b1:c9:ae:6c:88:17:f5:c0:8a:b4:
                    2c:ba:2d:c1:eb:75:c1:81:8e:39:f1:ef:cf:60:9a:
                    09:22:92:bf:a6:b7:e3:98:5f:00:a8:20:4a:d2:e0:
                    99:74:68:41:5e:a7:15:ce:78:db:e3:35:de:ef:e9:
                    ae:53:7d:6b:02:c4:72:27:9f:35:fd:db:62:b8:1b:
                    5b:b6:86:aa:c8:5a:67:09:1f:b0:b3:c5:9e:67:c4:
                    1b:fa:a0:94:d6:c9:05:5e:30:55:fb:4e:48:e8:15:
                    30:24:29:eb:48:e5:c2:b7:56:a4:ad:3c:1b:93:b8:
                    6c:3c:f7:4c:42:29:32:5d:3a:e0:9f:3b:8e:42:db:
                    e7:f2:36:09:17:8f:99:1e:71:2a:79:bc:b3:e9:7c:
                    53:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:80:5B:CD:9C:05:EA:8F:BD:F4:71:3F:9E:C0:E4:E3:47:8F:77:15
            X509v3 Authority Key Identifier:
                keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:80:24:98:10:ee:23:89:9f:af:67:48:65:e2:5f:41:22:80:
         58:43:98:78:0b:6d:d2:e5:39:ad:3b:d6:f5:90:c5:20:91:45:
         2b:d1:eb:fd:cc:5e:29:6f:68:91:da:4a:17:e5:3c:78:7f:05:
         01:d6:a0:43:cc:6c:99:be:3b:54:7e:45:80:eb:c7:44:e4:6f:
         f2:96:d7:f0:fa:f5:c0:6f:7c:e0:82:1f:38:64:3f:41:e7:78:
         db:20:f8:cf:ed:c4:74:cc:a0:80:57:ef:29:d9:8c:c5:f4:d0:
         a9:15:d8:09:f5:de:b1:d9:24:5e:6d:4c:cd:e3:c4:b7:7d:0d:
         2a:7e:7e:00:14:5f:a2:08:19:50:28:78:af:a0:b2:69:ce:3b:
         a0:02:d7:65:c2:c8:c0:74:cb:00:f1:18:35:64:24:1f:75:67:
         00:69:1e:fa:9b:a4:7c:13:d0:a0:33:ee:3f:48:75:17:e3:f1:
         2e:15:f5:a4:fd:4a:d2:c7:1c:d1:32:aa:bc:5f:79:f7:0a:0b:
         3a:64:31:dc:97:9a:f9:b8:74:42:0c:9c:27:2b:ba:3e:79:b3:
         7d:91:8c:b7:5b:19:8d:8a:20:6f:55:43:51:c0:f2:9d:2b:3d:
         dd:ac:ad:ec:a0:b0:43:54:70:ca:f9:21:68:c0:1b:09:0c:0f:
         02:97:59:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 5 10:01:37 2026 by rpki-client